Skip to content

Add SSL services for zendesk#60

Closed
Fisjkars wants to merge 1 commit intohaccer:masterfrom
Fisjkars:patch-1
Closed

Add SSL services for zendesk#60
Fisjkars wants to merge 1 commit intohaccer:masterfrom
Fisjkars:patch-1

Conversation

@Fisjkars
Copy link

Hello,

Thanks for this awesome project !!
I would like to add the ssl.zendesk.com to fingerprint.json.
It's cannot be an addition to zendesk because the behavior is not the same (nxdomain = true). Zendesk create this subdomain when the instance is mapped to a custom host mapping.

How to exploit :

  • Check if xxx is available on zendesk then create the instance.
  • Set Host mapping to 'malicious.com' and generate a certificate and add it to the zendesk instance (SSL conf.)
  • The domain will normally appeared.
  • The vulnerable domain will be link to your malicious instance (with a certificate error but nice).

https://support.zendesk.com/hc/en-us/community/posts/207580187-Host-Mapping-Issue

@haccer
Copy link
Owner

haccer commented Mar 15, 2026

Hi @Fisjkars - Sorry I didn't see this until now. I don't think this is still a subdomain takeover method anymore

@haccer haccer closed this Mar 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants